WO2016058304A1

WO2016058304A1 - Password input method and system based on two-stage conversion

Info

Publication number: WO2016058304A1
Application number: PCT/CN2015/072711
Authority: WO
Inventors: 桑永朋
Original assignee: 桑永朋
Priority date: 2014-10-13
Filing date: 2015-02-11
Publication date: 2016-04-21
Also published as: CN104298905B; CN104298905A; US20160292402A1

Abstract

A password input method based on two-stage conversion, particularly as follows: (1) taking password composition symbols as original basic symbols, and randomly selecting intermediate basic symbols therefor; (2) randomly ordering the original basic symbols and the intermediate basic symbols respectively and making same in one-to-one correspondence according to a spatial position relationship to form first-stage correlation; (3) randomly re-ordering the original basic symbols and the intermediate basic symbols again respectively and making same in one-to-one correspondence according to the spatial position relationship to form second-stage correlation; (4) with regard to a current password composition symbol to be input, querying an original basic symbol corresponding thereto according to the second-stage correlation first and then the first-stage correlation so as to complete an input operation on the current password composition symbol to be input; and (5) repeating steps (2)-(4) until the input of all the password composition symbols is completed. The method can be well adapted to a currently and widely used password input environment, and can effectively avoid a password stealing problem at the same time, thereby improving the security during password input.

Description

Password input method and system based on two-level conversion

[Technical Field]

The invention belongs to the field of computer information security, and particularly relates to a password input method and system based on two-level conversion.

【Background technique】

For a long time, among the password authentication systems, the most widely used forms of passwords are alphanumeric passwords, that is, a combination of letters and numbers as a password, which is used to prove identity by submitting the password to the system or others. However, it is also facing many problems while it is convenient and fast. Usually for security reasons, the system will require users to use strong passwords. Strong passwords are characterized by a relatively long number of passwords, using a combination of uppercase and lowercase letters, numbers, and some special symbols. The key space is large and is not easily brute-forced. However, users tend to shorten the password length or use familiar passwords in order to use and remember. This brings a fatal problem to the security of passwords. Attackers often crack the user's password and steal other people's information through various methods including brute force attack and dictionary attack. D. Klein pointed out that using a dictionary containing 3000000 words can crack 1/4 of 14,000 passwords. E. Spafford also pointed out that using only the 1988 UNIX online dictionary plus 432 words as a dictionary can crack the password of 50% of the website. Today's computers are getting faster and faster, making more complex attack dictionaries easy to use in password cracking, and the speed of cracking is shortening.

[Summary of the Invention]

In view of the above defects or improvement requirements of the prior art, the present invention provides a password input method and system based on two-level conversion, in which a layer of intermediate symbols is added between a user password symbol and an actual input symbol, so that the actual input symbol and The password symbol is not a simple one-to-one correspondence. The user no longer directly inputs the original password symbol, but inputs the symbol according to the randomly generated correspondence, which effectively prevents the peek and crack of the password.

To achieve the above object, the present invention provides a password input method based on two-level conversion, a package Including the following steps:

(1) Using the password composition symbol as the original basic symbol, and randomly selecting the intermediate basic symbols of the same number;

(2) randomly sorting the original basic symbols and the intermediate basic symbols respectively, and sequentially matching the sorted intermediate basic symbols with the original basic symbols according to the spatial position relationship to form a first-level association;

(3) re-sorting the original basic symbol and the intermediate basic symbol separately, and respectively re-sorting the intermediate basic symbol and the original basic symbol in a one-to-one correspondence according to the spatial position relationship to form a secondary association;

(4) For the current password to be input, the intermediate basic symbol corresponding to the symbol position of the current password to be input is first searched in the secondary association, and then the original basic symbol corresponding to the intermediate basic symbol position is queried in the primary association. , the user inputs the original basic symbol that is queried, and completes the input operation of the currently composed password to form a symbol;

(5) Repeat steps (2) to (4) until all password constituent symbols have been entered.

Further, the original basic symbol is any one or combination of letters, numbers, special characters, Chinese characters, graphics, and images.

Further, the intermediate basic symbol is any one or combination of letters, numbers, special characters, Chinese characters, graphics, and images.

Further, the original basic symbol is different from the intermediate basic symbol.

Further, the original basic symbol is a letter or a number or a combination of a letter and a number, and the intermediate basic symbol is a special character or a graphic or an image or a combination of the three.

Further, the first-level association and the second-level association establish a one-to-one correspondence of positions according to a sequence or a matrix.

A password input system based on two-level conversion, comprising:

a first module, configured to use a password composition symbol as the original basic symbol, and randomly select the same intermediate basic symbol for the same;

a second module for randomly sorting the original basic symbols and the intermediate basic symbols, respectively, to sort The intermediate intermediate symbol and the original basic symbol are in one-to-one correspondence according to the spatial positional relationship, forming a first-level association;

The third module is configured to re-sort the original basic symbol and the intermediate basic symbol separately, and respectively re-sort the intermediate basic symbol and the original basic symbol according to the spatial position relationship to form a second-level association;

The fourth module is configured to form a symbol for the current password to be input, first querying, in the secondary association, an intermediate basic symbol corresponding to the symbol position of the current password to be input, and then querying, in the primary association, the location corresponding to the intermediate basic symbol position. The original basic symbol, the user inputs the original basic symbol that is queried, and completes the input operation of the currently formed password to form a symbol;

The fifth module is used to repeat the second module to the fourth module until all the password constituent symbols are input.

In general, the above technical solutions conceived by the present invention have the following beneficial effects compared with the prior art:

A layer of intermediate symbols is added between the user password symbol and the actual input symbol to establish a two-pole association of the original basic symbol - the intermediate basic symbol, the intermediate basic symbol - the original basic symbol. The user's final input depends on the randomly generated association table, and the association table changes each time a password symbol is entered. For a certain key, the last actual input using the keyboard may be any combination of symbols. One of the biggest advantages of doing this is that it can prevent shoulder sneak, because each time you enter a password, there will be a different association table, which can't be remembered by ordinary people in a short time. And thus generated a diversified correspondence table for the user to enter the key. Changing the traditional single key input method to a random symbol diversification association table is a secure password input scheme.

[Description of the Drawings]

Figure 1 is a flow chart of the method of the present invention.

2 is a schematic diagram of Example 1, wherein FIG. 2(a) is a schematic diagram of an input keyboard of the ATM of Example 1, and FIG. 2(b) is a schematic diagram of an intermediate basic symbol selected by the example 1, FIG. 2(c) and FIG. 2(d) The schematic diagram of the first-level association relationship of the example 1; FIG. 2(e) and FIG. 2(f) are the second-level association relationship of the example 1. schematic diagram.

3 is a schematic diagram of the example 2, wherein FIG. 3(a) is a schematic diagram of an input keyboard of the ATM of the example 2, FIG. 3(b) is a schematic diagram of an intermediate basic symbol selected by the example 2, and FIG. 3(c) is a level of the example 2; Schematic diagram of the association relationship; Figure 3 (d) is a schematic diagram of the secondary association relationship of the example 2.

4 is a schematic diagram of an example 3, wherein FIG. 4(a) is a schematic diagram of an input keyboard of the ATM of the example 3, FIG. 4(b) is a schematic diagram of an intermediate basic symbol selected by the example 3, and FIG. 4(c) is a level of the third embodiment. Schematic diagram of the association relationship; Figure 4 (d) is a schematic diagram of the secondary association relationship of the example 3.

【detailed description】

In order to make the objects, technical solutions and advantages of the present invention more comprehensible, the present invention will be further described in detail below. It is understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention. Further, the technical features involved in the various embodiments of the present invention described below may be combined with each other as long as they do not constitute a conflict with each other.

Referring to FIG. 1, the present invention provides a password input method based on two-level conversion, which is specifically:

(1) Obtaining the original basic symbols constituting the password, and randomly selecting the intermediate basic symbols of the same number;

(4) For the currently-to-be-entered symbol, first query the intermediate basic symbol corresponding to the current character position to be input in the second-level association, and then query the original basic symbol corresponding to the intermediate basic symbol position in the first-level association, and the user inputs the query. The original basic symbol to;

(5) Repeat steps (2) to (4) until all the symbols constituting the password have been input.

The internal resolution of the password is the inverse of the user input, according to the user's input, The user password is finally determined by querying the real character in the first level association and the second level association.

The original basic symbol constituting the password may be a letter, a number, a special character, a Chinese character, a graphic/image, or the like, or may be a combination of a letter, a number, a special character, a Chinese character, a graphic, and an image; the intermediate basic symbol may be a letter , numbers, special characters, Chinese characters, graphics, images, etc., can also be a combination of letters, numbers, special characters, Chinese characters, graphics, images. The letters are English letters, Latin letters, Greek letters, etc., the numbers are 0, 1, 2, 3, etc., and the special characters are punctuation marks, mathematical operators, tabs, etc., and the graphics/images are Arbitrary visual graphics (such as rectangles, diamonds, triangles, circles, etc.) and images (such as images of human bodies or their parts, images of natural objects such as mountains, water, trees, animals, etc., artificial objects such as cars, boats, airplanes, tables and chairs) image).

Considering the difference between the original basic symbol and the intermediate basic symbol, it is preferable that the original basic symbol and the intermediate basic symbol are not reused as much as possible.

In accordance with the current composition of passwords in a large number of practical applications, it is preferred that the original basic symbols adopt letters and numbers.

Combined with the characteristics of short-term memory difference of the object to the uncommon object, it is preferred that the intermediate basic symbol adopt special characters, complicated graphics/images, etc., to improve the anti-peeping ability when the password is input.

The first-level association and the second-level association may correspond to a positional relationship such as a sequence position or a matrix position.

According to the technical idea of the present invention, it can be extended to three-level association, four-level association, and even more layers as needed, and the more layers, the higher the complexity and security of password input.

The password input method of the present invention can be applied to various occasions where a password is required to obtain a corresponding service, including an ATM machine password, an online banking password, an access password, an important file encryption password, an email password, and the like.

Example 1:

The following uses an ATM machine as an example. Figure 2 (a) is the input interface of ATM, you can enter a number from 0 to 9. As shown in Fig. 2(b), this example selects a total of 10 letters a to j as intermediate basic symbols. Assuming the user password is "123941", the first level conversion relationship is displayed on the screen. As shown in Figures 2(c) and 2(d), the second-order conversion relationship is displayed as shown in Figures 2(e) and 2(f). If the user wants to enter the number "1", first find the intermediate basic symbol "a" corresponding to its position according to the secondary correspondence table shown in Figures 2(e) and 2(f), and then according to Figures 2(c) and 2 ( d) The first-level correspondence table shown finds the original basic symbol "7" corresponding to the "a" position, so the user should operate the number "7" key on the ATM keyboard. After the input, the user continues to want to enter the number "2", then the system automatically generates a new relationship comparison table, input in the same way. For the sake of simplicity, it is assumed that the association table corresponding to the six inputs is the same as the first time, and finally the password input from the keyboard should be "765437". The analysis of the password by the ATM machine inside the system is the reverse process of the user input. According to the input of the user, the user password is finally determined according to the first level association and the second level association to the real character.

Example 2:

Figure 3 (a) is the input interface of the ATM, which can input numbers from 0 to 9; as shown in Figure 3 (b), this example selects 10 animal patterns as intermediate basic symbols. The first-level conversion relationship is displayed on the screen as shown in Fig. 3(c), and the second-level conversion relationship is displayed as shown in Fig. 3(d). Assume that the user password is "123941". If the user wants to input the number "1", first find the intermediate basic symbol corresponding to its position according to the secondary correspondence table shown in Figure 3(d), and then according to Figure 3(c) The first level correspondence table finds the original basic symbol "7" corresponding to the intermediate basic symbol position, and he should operate the number "7" key on the ATM keyboard. After the input, the user continues to want to enter the number "2", the system automatically generates a new look-up table, input in the same way. For the sake of simplicity, it is assumed that the association table corresponding to the six inputs is the same as the first time, and finally the password input from the keyboard should be "765437".

Example 3:

Figure 4 (a) is the input interface of the ATM, which can input numbers from 0 to 9; as shown in Figure 4 (b), this example selects 10 combinations of words, letters and graphics to form the intermediate basic symbols. The first-level conversion relationship is displayed on the screen as shown in Fig. 4(c), and the second-level conversion relationship is displayed as shown in Fig. 4(d). Assume that the user password is "123941" if the user wants to enter a number "1", first find the intermediate basic symbol "A" corresponding to its position according to the secondary correspondence table shown in Fig. 3 (d), and then find the intermediate basic symbol position according to the first-level correspondence table shown in Fig. 3 (c) Corresponding to the original basic symbol "7", he should operate the number "7" key on the ATM keyboard. After the input, the user continues to want to enter the number "2", the system automatically generates a new look-up table, input in the same way. For the sake of simplicity, it is assumed that the association table corresponding to the six inputs is the same as the first time, and finally the password input from the keyboard should be "765437".

Those skilled in the art will appreciate that the above description is only a preferred embodiment of the present invention, and is not intended to limit the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and scope of the present invention, All should be included in the scope of protection of the present invention.

Claims

A password input method based on two-level conversion, comprising the following steps:

(1) Using the password composition symbol as the original basic symbol, and randomly selecting the intermediate basic symbols of the same number;

(2) randomly sorting the original basic symbols and the intermediate basic symbols respectively, and sequentially matching the sorted intermediate basic symbols with the original basic symbols according to the spatial position relationship to form a first-level association;

(3) re-sorting the original basic symbol and the intermediate basic symbol separately, and respectively re-sorting the intermediate basic symbol and the original basic symbol in a one-to-one correspondence according to the spatial position relationship to form a secondary association;

(4) For the current password to be input, the intermediate basic symbol corresponding to the symbol position of the current password to be input is first searched in the secondary association, and then the original basic symbol corresponding to the intermediate basic symbol position is queried in the primary association. , the user inputs the original basic symbol that is queried, and completes the input operation of the currently composed password to form a symbol;

(5) Repeat steps (2) to (4) until all password constituent symbols have been entered.
The password input method according to claim 1, wherein the original basic symbol is any one or a combination of letters, numbers, special characters, Chinese characters, graphics, and images.
The password input method according to claim 1, wherein the intermediate basic symbol is any one or a combination of letters, numbers, special characters, Chinese characters, graphics, and images.
The password input method according to claim 1 or 2 or 3, wherein the original basic symbol is different from the intermediate basic symbol.
The password input method according to claim 1 or 2 or 3, wherein the original basic symbol is a letter or a number or a combination of a letter and a number, and the intermediate basic symbol is a special character or a graphic or an image or the three Combination.
The password input method according to claim 1 or 2 or 3, wherein the first-level association and the second-level association establish a one-to-one correspondence of positions according to a sequence or a matrix.
A password input system based on two-level conversion, comprising:

a first module, configured to use a password composition symbol as the original basic symbol, and randomly select the same intermediate basic symbol for the same;

a second module is configured to randomly sort the original basic symbols and the intermediate basic symbols respectively, and respectively match the sorted intermediate basic symbols with the original basic symbols according to the spatial position relationship to form a first-level association;

The third module is configured to re-sort the original basic symbol and the intermediate basic symbol separately, and respectively re-sort the intermediate basic symbol and the original basic symbol according to the spatial position relationship to form a second-level association;

The fourth module is configured to form a symbol for the current password to be input, first querying, in the secondary association, an intermediate basic symbol corresponding to the symbol position of the current password to be input, and then querying, in the primary association, the location corresponding to the intermediate basic symbol position. The original basic symbol, the user inputs the original basic symbol that is queried, and completes the input operation of the currently formed password to form a symbol;

The fifth module is used to repeat the second module to the fourth module until all the password constituent symbols are input.